PT-2026-78634 · Ibm · Ibm Powervm Hypervisor
CVE-2026-18821
·
Published
2026-08-19
·
Updated
2026-08-22
CVSS v3.1
8.8
High
| Vector | AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
IBM PowerVM Hypervisor version FW1120.00
IBM PowerVM Hypervisor versions FW1110.00 through FW1110.30
IBM PowerVM Hypervisor versions FW1060.00 through FW1060.80
IBM PowerVM Hypervisor versions FW950.00 through FW950.H2
Description
A flaw exists in the partition firmware during the network boot process. An unauthenticated attacker located on the same network as a partition performing a network boot can send a malformed packet to execute arbitrary code within the partition firmware. This action can compromise all subsequent components loaded by that partition. This issue only affects partitions actively undergoing network boot; other partitions and the managed system remain unaffected.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Powervm Hypervisor